InfoSecBulletin Cybersecurity for mankind

BlueDelta conducted a complex credential-harvesting operation targeting critical infrastructure and research institutions in 2025, as revealed by an investigation from Recorded Future’s Insikt Group. The campaigns leveraged legitimate PDF documents as bait, including publications from the Gulf Research Center titled “Strategic and Political Implications for Israel and Iran: The Day …

Ransomware activity is rising in 2026, with 121 confirmed victims from 310 active groups. A few key players dominate the fragmented landscape, with Qilin and Lynx each having over 20 victims. Sinobi is also significant, while familiar groups like Play, Akira, and Direwolf continue their attacks. New groups such as …

A PoC exploit for CVE-2025-38352, a critical race condition flaw in the Linux kernel, is now available on GitHub. A vulnerability found this year affects POSIX CPU timers and had been used in targeted attacks on 32-bit Android devices. CVE-2025-38352 is a use-after-free (UAF) vulnerability in the Linux kernel’s handle_posix_cpu_timers() …